21db863adabb9af31ba600a871ccc2228f178101ac73332d2dd22fdec74103af

Analysis

max time kernel
178s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
17-06-2024 10:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NoDrunkDrive.apk
Size

750KB
MD5

f7b3e247da279555a04c074df645e540
SHA1

45f5c6a06e06a5e0e355ca41a3eda317702f8cd5
SHA256

21db863adabb9af31ba600a871ccc2228f178101ac73332d2dd22fdec74103af
SHA512

434a36529abc91a47df6011d8b07007fce1da5a3fcf3a4834c817b02167ed67bec010690a89bd930ebfc5456068a3e4591c613f866dd01cb1374cf3576950184
SSDEEP

12288:fjmMa1a8LreTtkPuHb55WmpYshXZPbGwidNpgC:fjFa1a2e5OuHb55WmD9idNpl

Score

7^/10

banker discovery evasion impact persistence privilege_escalation

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground cmf0.c3b5bm90zq.patch
Requests enabling of the accessibility settings. 1 IoCs

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS cmf0.c3b5bm90zq.patch
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN cmf0.c3b5bm90zq.patch
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

cmf0.c3b5bm90zq.patch

description ioc process

Framework service call android.app.IActivityManager.registerReceiver cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	cmf0.c3b5bm90zq.patch

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	cmf0.c3b5bm90zq.patch

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch
1⤵
- Makes use of the framework's foreground persistence service
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4270

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Dolbysoundsystem/config17-06-2024.log
Filesize
74B

MD5
a7c95c8d9d10396e05884966a39e2dba

SHA1
f57f792c8a430072c78d5c656be32d1495fd2db6

SHA256
d176305a648d565c61e5405b3b13601d834eeb4b30c7a2a60b12250cc66bca5a

SHA512
3a5d7032113bf4917198059492f11535389722aac5c1854e2aa0e325ed49531e9422fc348bed12c84d2f5428ff3c5df61f498fd18e5725c505246881952f7506

Download Submit
/storage/emulated/0/Dolbysoundsystem/config17-06-2024.log
Filesize
69B

MD5
3bfa791f0d751350dea469dc569546cf

SHA1
1e8ca1530c5a415b5dfe2ef392b9b7012cba7ab5

SHA256
30f4cfbdbc154d1c399e07947255d51ed00805ad31bae69c7007977ca59c73e4

SHA512
d6e5c4ed3e3614d81ded91a710a2df85aaea9e952525e5d141778ccb24be012ac680a2b1c18742106bef172eca2553089ab9e477d7beb2f69b624f5caca938f2

Download Submit
/storage/emulated/0/Dolbysoundsystem/config17-06-2024.log
Filesize
52B

MD5
05e96860d3fdb1c9df9105b8f076cdb7

SHA1
86d2a6e89ca03930847064c50961c850dcff6927

SHA256
3fc680695e90f13e709f36021f77dc3b779acd7a4e1c884da33dbe65e4f3f46f

SHA512
0bcb8736595485b2c8b0f46e48024df905c14c1f5c4bbfa845b77738c8800aa6846e97a322a98ce15ee1359eadd6a31076c39a3e12967e4cd0ab3e7def4842e4

Download Submit
/storage/emulated/0/Dolbysoundsystem/config17-06-2024.log
Filesize
66B

MD5
c3b7331ba3f57cd9d9c91c255e63c7a6

SHA1
a8aa96f7be6058a34eef3c2875c386ca89855eb5

SHA256
84a899d362c11301bfda5d6e034d3c2936811bb227881afc3bdceac8c14bc92c

SHA512
1db7fa6d04a331a7947af7d22716009d867151fd3bbf2f2f75f5aa5f7bb20a6a64adc7b61ad56b73e58eb5793430e2acb3b3bfe9d19c8e588df95504bac14122

Download Submit
/storage/emulated/0/Dolbysoundsystem/config17-06-2024.log
Filesize
62B

MD5
8d8af5ce8febbb782140815b52f1eb0e

SHA1
d6682d0705406fab13392de333f911007ed73b50

SHA256
cc532ce84b8d8d1aeea6b8103ed0ce743b1be22a6536cdef582bf9ba817b52dd

SHA512
1e16134572692417463336524c127709bbad21a6ad61841ed20560e6ced7ce15b03d3d91cb74e797b4dd43e307369467fa2a2b228e10c7fb623c7eddfa145565

Download Submit
/storage/emulated/0/Dolbysoundsystem/config17-06-2024.log
Filesize
233B

MD5
6aff87bf7e0e2110427f268a53e0e1dd

SHA1
062409d95104029720de1d406c1e9c679edb329f

SHA256
84d4cd8bb8fc94c2e3a553e3cb98d42f22b1aa06c97ce2f15abfcb71dac43d81

SHA512
b4d9ee6e53b2f575e61038687e1cca1905fbe98fd7089a73dad09b5706b8a74c010e3a846b57a91acb61a574774931722d8cf9c85491bd55a62758969c993a6f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads